Fix XSS issue with customer name

Escape customer's name before setting cookie